2026-08-11_4e2d4010df31a5d8c88ae9882864746b_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-11_4e2d4010df31a5d8c88ae9882864746b_elex_mafia_stealc_tofsee
Size 505KB
Sample260812-bbbp6swckd
SHA256 d0b81cb1801317ae51a346022d47044aacd64b494c4c292d8c5a8a218fb44d86
MD5 4e2d4010df31a5d8c88ae9882864746b
SHA1 78f8e825d14ef7b0783ee3cdf2906b238408de7f
SHA512 f40163566080750ecd62f67a03d1eeb7b5412074d1b80510ed0535d1391e08f0d04d08cde31b6eaa7e78859e42aff4cf801082cc8e9b2b443731a5b98ac21080
SSDEEP 12288:NU5rCOTeijGVfP2aMZ16JSTVgxKcOLvHTZwlH:NUQOJj0f+NDRjTSlH
TLSH
T186B4F1257585C133E6D211310BE6EBA26A3B7C72572264C33B94627E2EB07E1E379347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-11_4e2d4010df31a5d8c88ae9882864746b_elex_mafia_stealc_tofsee

File Explorer

2026-08-11_4e2d4010df31a5d8c88ae9882864746b_elex_mafia_stealc_tofsee

.exe 505KB

2026-08-11_4e2d4010df31a5d8c88ae9882864746b_elex_mafia_stealc_tofsee

SHA256 d0b81cb1801317ae51a346022d47044aacd64b494c4c292d8c5a8a218fb44d86
MD5 4e2d4010df31a5d8c88ae9882864746b
SHA1 78f8e825d14ef7b0783ee3cdf2906b238408de7f
SHA512 f40163566080750ecd62f67a03d1eeb7b5412074d1b80510ed0535d1391e08f0d04d08cde31b6eaa7e78859e42aff4cf801082cc8e9b2b443731a5b98ac21080
SSDEEP 12288:NU5rCOTeijGVfP2aMZ16JSTVgxKcOLvHTZwlH:NUQOJj0f+NDRjTSlH
TLSH
T186B4F1257585C133E6D211310BE6EBA26A3B7C72572264C33B94627E2EB07E1E379347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

262KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-11_4e2d4010df31a5d8c88ae9882864746b_elex_mafia_stealc_tofsee

generic